Q2 report finds credential phishing accounts for 55.2% of account takeover signals
QTWO•Q2 Holdings analyzed account takeover signals at 199 U.S. financial institutions from early June through early August 2026; credential phishing accounted for 55.2%. Median fraud amounts involving bypassed dual-approval controls exceeded those for other fraud by more than 13 times.
1. Report findings
Q2 Holdings’ report analyzed 199 U.S. financial institutions from early June through early August 2026. Credential phishing accounted for 55.2% of detected account takeover signals, while mule account activity appeared twice as frequently at credit unions as at banks.
2. Commercial fraud risk
Median fraud amounts involving bypassed dual-approval controls exceeded the median for other fraud by more than 13 times. The brief cites Javelin Strategy and Research as estimating that account takeover losses exceeded $15 billion in 2025, making it the costliest fraud category.
